Static task
static1
Behavioral task
behavioral1
Sample
dc89fb6fea674bafdb5f7945ece7ba57090647996caee4fd06e7f2a4c20fe4ea.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
dc89fb6fea674bafdb5f7945ece7ba57090647996caee4fd06e7f2a4c20fe4ea.exe
Resource
win10v2004-20230221-en
General
-
Target
9575620fe1758d6c5686dfec839e639c.bin
-
Size
1.2MB
-
MD5
d17fe11629b404c7a81df7c936ea9711
-
SHA1
6a942b0c98508999b60f70ea888848aa9e77f0eb
-
SHA256
37ad114d243d2ea75fd41a7818963eb18347d8d6ab8bc1a62bb4db12975f6f59
-
SHA512
1032cbbc122461a14bd329dc8a75e549905272077cd5f68e2f0232d31910d6092c47046cf4422c555b1bb76caa5b8173624d1a6b9d259586b5e28fc820941f8e
-
SSDEEP
24576:JgxgRvjsPi/90MUacn9UdAvue/VrJBCTOEt+cuhaKRQnGd4:JugwiV0nn9Umt1JB3EuhaKeGa
Malware Config
Signatures
Files
-
9575620fe1758d6c5686dfec839e639c.bin.zip
Password: infected
-
dc89fb6fea674bafdb5f7945ece7ba57090647996caee4fd06e7f2a4c20fe4ea.exe.exe windows x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 615KB - Virtual size: 614KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 57B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 951KB - Virtual size: 950KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ